Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w0FvopiOAiL9kT_ym9c0JRLLP2g.roa
File: w0FvopiOAiL9kT_ym9c0JRLLP2g.roa (raw, json)
Hash identifier: U0lY/yMgv9otnqo+dG4Zw6IZvSYXfQ2BBZu++GF5rTY=
Subject key identifier: C3:41:6F:A2:98:8E:02:22:FD:91:3F:F2:9B:D7:34:25:12:CB:3F:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E3AAA0D3CBEF52D140B15E25748926B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w0FvopiOAiL9kT_ym9c0JRLLP2g.roa
Signing time: Wed 03 May 2023 22:10:22 +0000
ROA not before: Wed 03 May 2023 22:10:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:aa:a0:d3:cb:ef:52:d1:40:b1:5e:25:74:89:26:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 22:10:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3416fa2988e0222fd913ff29bd7342512cb3f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:ea:63:58:ce:57:0a:b7:be:b5:03:5d:59:
e2:e8:03:f6:cf:7a:a3:91:c7:8d:df:53:a1:79:01:
46:60:84:88:6b:20:94:80:d9:df:38:f4:86:96:17:
ad:2f:4e:c0:3a:c9:c1:31:e9:17:58:d6:9e:00:63:
26:4c:11:9c:f0:01:70:92:62:bf:49:1b:1c:2c:93:
7c:b3:bf:f2:21:32:c8:74:cf:1d:46:36:85:8f:4d:
b1:c5:f3:66:2d:b9:e3:18:41:fe:0f:7f:41:24:83:
f7:ab:78:b0:67:8f:2a:fd:aa:10:75:79:05:41:c0:
da:51:62:76:e3:34:ce:ff:03:f2:9c:21:c7:c2:9b:
49:f9:37:6d:e6:8c:4b:8b:a3:30:15:24:e7:13:b1:
7f:41:ac:b9:99:58:09:e6:cc:59:ee:e7:4c:d5:28:
39:6a:5f:84:40:e3:c4:b1:57:dd:2e:2a:c8:03:80:
d5:52:a9:e2:10:70:2f:ed:7a:9b:41:81:68:45:c9:
20:3d:6a:11:f3:aa:50:e2:5b:2a:4d:17:de:a4:4d:
4b:fd:fb:88:c7:c1:b3:b1:7c:a9:fe:0b:60:11:52:
99:ee:a0:f0:01:4f:d3:fa:3f:7b:da:88:ec:02:05:
99:0b:25:4a:76:51:df:eb:a1:4b:c7:39:73:1e:f0:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:6F:A2:98:8E:02:22:FD:91:3F:F2:9B:D7:34:25:12:CB:3F:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w0FvopiOAiL9kT_ym9c0JRLLP2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:41:e1:84:a1:94:ef:12:e8:c2:8c:bd:e0:f9:69:46:f4:6d:
cb:d6:e0:12:2d:75:2e:e4:b7:b5:2e:6f:99:04:c0:a0:21:44:
eb:06:d0:e9:c6:eb:26:7b:be:b3:fb:51:31:86:ae:6b:37:dd:
c0:f5:98:84:9d:4e:1e:f2:d0:0c:15:d3:34:35:fe:cb:45:df:
83:c7:0b:5f:42:4d:13:4b:7f:32:16:4c:57:8d:92:fb:70:80:
a1:91:f1:a2:a3:cf:66:69:3d:86:4f:46:cc:2e:d6:63:c5:e3:
c7:3a:63:b0:ec:14:12:7f:67:4c:52:9e:ef:7d:b1:cd:56:92:
3e:a0:00:88:83:e5:78:31:5b:4a:c3:d2:2b:3d:74:f7:d1:49:
30:af:8e:55:d9:e1:ab:71:bc:d5:31:0f:f5:03:67:dc:c1:30:
ce:8a:d1:c2:fc:ba:c6:d9:64:8f:d4:35:db:05:26:9b:8d:77:
bb:a1:f8:8d:ae:b3:04:11:36:ec:59:81:37:78:15:5a:e9:7b:
3c:ec:71:07:fd:92:68:22:31:d4:db:ea:8e:aa:29:a0:f9:6c:
d9:d7:fa:70:93:54:fa:2f:93:97:31:1a:64:7a:dd:f2:f3:41:
31:de:ca:03:e3:ae:8b:a1:14:3d:8d:b2:ba:1b:d3:ef:d0:76:
93:15:a3:4c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfjqqDTy+9S0UCxXiV0iSa1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTAzMjIxMDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzQxNmZhMjk4OGUwMjIyZmQ5MTNmZjI5YmQ3MzQyNTEyY2IzZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbnqY1jOVwq3vrUDXVni6AP2z3qj
kceN31OheQFGYISIayCUgNnfOPSGlhetL07AOsnBMekXWNaeAGMmTBGc8AFwkmK/
SRscLJN8s7/yITLIdM8dRjaFj02xxfNmLbnjGEH+D39BJIP3q3iwZ48q/aoQdXkF
QcDaUWJ24zTO/wPynCHHwptJ+Tdt5oxLi6MwFSTnE7F/Qay5mVgJ5sxZ7udM1Sg5
al+EQOPEsVfdLirIA4DVUqniEHAv7XqbQYFoRckgPWoR86pQ4lsqTRfepE1L/fuI
x8GzsXyp/gtgEVKZ7qDwAU/T+j972ojsAgWZCyVKdlHf66FLxzlzHvB9owIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMNBb6KYjgIi/ZE/8pvXNCUSyz9oMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdzBGdm9waU9BaUw5a1RfeW05YzBKUkxMUDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGxB4YShlO8S6MKMveD5
aUb0bcvW4BItdS7kt7Uub5kEwKAhROsG0OnG6yZ7vrP7UTGGrms33cD1mISdTh7y
0AwV0zQ1/stF34PHC19CTRNLfzIWTFeNkvtwgKGR8aKjz2ZpPYZPRswu1mPF48c6
Y7DsFBJ/Z0xSnu99sc1Wkj6gAIiD5XgxW0rD0is9dPfRSTCvjlXZ4atxvNUxD/UD
Z9zBMM6K0cL8usbZZI/UNdsFJpuNd7uh+I2uswQRNuxZgTd4FVrpezzscQf9kmgi
MdTb6o6qKaD5bNnX+nCTVPovk5cxGmR63fLzQTHeygPjrouhFD2Nsrob0+/QdpMV
o0w=
-----END CERTIFICATE-----
Generated at Thu May 1 04:28:19 2025 by rpki-client